Investigating Social Networking applications on smartphones detecting Facebook, Twitter, LinkedIn and Google+ artefacts on Android and iOS platforms

Australian Journal of Forensic Sciences

Volumn 48, Issue 4, 2016, Pages 469-488

  Norouzizadeh Dezfouli, Farhood ^a   Dehghantanha, Ali ^b   Eterovic Soric, Brett ^c   Choo, Kim Kwang Raymond ^c  

^a UNIVERSITY PUTRA MALAYSIA   (Malaysia)

^b UNIVERSITY OF SALFORD   (United Kingdom)

^c UNIVERSITY OF SOUTH AUSTRALIA   (Australia)

Author keywords

Android investigation; digital forensics; Facebook forensics; Google+ forensics; iOS investigation; LinkedIn forensics; mobile app forensics; mobile device forensics; social networking application forensics; Twitter forensics

Indexed keywords

ARTICLE; ARTIFACT; CLINICAL RESEARCH; CONCEPTUAL FRAMEWORK; CRIMINOLOGY; DATA BASE; DATA COLLECTION METHOD; FORENSIC IDENTIFICATION; FORENSIC SCIENCE; INFORMATION PROCESSING; INFORMATION SYSTEM; INTERNET; MOBILE APPLICATION; MOBILE PHONE; PRACTICE GUIDELINE; SMARTPHONE; SOCIAL NETWORK; TEXT MESSAGING; WEB BROWSER;

EID: 84938850824     PISSN: 00450618     EISSN: 1834562X     Source Type: Journal    
DOI: 10.1080/00450618.2015.1066854     Document Type: Article

References (49)

1. D.M.Boyd, N.B.Ellison. Social network sites: definition, history, and scholarship. J Comput-Mediat Comm. 2007;13(1):210–230.10.1111/j.1083-6101.2007.00393.x
2. Statista. Facebook: figures of monthly active users 2014 | Statistic. Statista [Internet]. 2015 [cited 1 April 2015]. Available from: http://www.statista.com/statistics/264810/number-of-monthly-active-facebook-users-worldwide/
3. M.Taylor, J.Haggerty, D.Gresty, P.Almond, T.Berry. Forensic investigation of social networking applications. Network Secur. 2014;2014(11):9–16.10.1016/S1353-4858(14)70112-6
4. V.Kisekka, S.Bagchi-Sen, H.Raghav Rao. Extent of private information disclosure on online social networks: an exploration of Facebook mobile phone users. Comput Human Behav. 2013;29(6):2722–2729.10.1016/j.chb.2013.07.023
5. J.Brenner. Social networking fact sheet. Pew Research Center’s Internet & American Life Project [Internet]. 2013 [cited 20 November 2014]. Available from: http://www.pewinternet.org/fact-sheets/social-networking-fact-sheet/
6. N.M.Zainudin, M.Merabti, D.Llewellyn-Jones. A digital forensic investigation model for online social networking. Proceedings of the 11th annual conference on the convergence of telecommunications, Networking & Broadcasting, Liverpool; 2010. p. 21–22.
7. D.Damopoulos, G.Kambourakis, S.Gritzalis. iSAM: an iPhone stealth airborne malware. In: J.Camenisch, S.Fischer-Hübner, Y.Murayama, A.Portmann, C.Rieder, editors. Future challenges in security and privacy for academia and industry. IFIP Advances in Information and Communication Technology. Springer: Berlin Heidelberg; 2011. p. 17–28.
8. D.Damopoulos, G.Kambourakis, S.Gritzalis. From keyloggers to touchloggers: take the rough with the smooth. Comput Secur. 2013;32:102–114.10.1016/j.cose.2012.10.002
9. D.Damopoulos, G.Kambourakis, S.Gritzalis, S.O.Park. Exposing mobile malware from the inside (or what is your mobile app really doing?) P2P Networking App. 2012;1–11.
10. K.Barmpatsalou, D.Damopoulos, G.Kambourakis, V.Katos. A critical review of 7 years of mobile device forensics. Digital Invest. 2013;10(4):323–349.10.1016/j.diin.2013.10.003
11. comScore Inc. comScore Reports July 2014 U.S. Smartphone Subscriber Market Share. comScore, Inc [Internet]. 2014 [cited 4 March 2015]. Available from: http://www.comscore.com/Insights/Market-Rankings/comScore-Reports-July-2014-US-Smartphone-Subscriber-Market-Share
12. M.Baca, J.Cosic, Z.Cosic. Forensic analysis of social networks (case study). In: Information Technology Interfaces (ITI), Proceedings of the ITI 2013 35th International Conference on. IEEE; 2013. p. 219–223.
13. B.Martini, Q.Do, K.-K.R.Choo. Chapter 14-Conceptual evidence collection and analysis methodology for Android devices. In: K.-K.R.Choo, editor. The Cloud Security Ecosystem. Boston, MA: Syngress; 2015. p. 285–307.
14. M.Shariati, A.Dehghantanha, B.Martini, K.-K.R.Choo. Chapter 19-Ubuntu One investigation: detecting evidences on client machines. In: K.-K.R.Choo, editor. The Cloud Security Ecosystem. Boston, MA: Syngress; 2015. p. 429–446.
15. C.Hutchings. Commercial use of Facebook and Twitter – risks and rewards. Comput Fraud Secur. 2012;2012(6):19–20.10.1016/S1361-3723(12)70065-9
16. J.C.Sipior, B.T.Ward, L.Volonino, L.MacGabhann. A framework for the E-Discovery of social media content in the United States. Inf Sys Manag. 2013;30(4):352–358.10.1080/10580530.2013.832965
17. O.Angelopoulou, S.Vidaliss. Towards “crime specific” digital investigation frameworks. In: School of Computer Science, University of Cardiff, Cardiff; 2013.
18. C.Tassone, B.Martini, K.-K.R.Choo, J.Slay. Mobile device forensics: a snapshot. Trends Issues Crime Criminal Justice. 2013(460):1–7.
19. G.Grispos, T.Storer, W.B.Glisson. A comparison of forensic evidence recovery techniques for a windows mobile smart phone. Digital Invest. 2011;8(1):23–36.10.1016/j.diin.2011.05.016
20. P.M.Mokhonoana, M.S.Olivier. Acquisition of a Symbian smart phone’s content with an on-phone forensic tool. In: Proceedings of the Southern African Telecommunication Networks and Applications Conference 2007 (SATNAC 2007). Sugar Beach Resort, Mauritius; 2007.
21. E.Casey. Digital evidence and computer crime: forensic science, computers and the Internet. Baltimore: Academic Press; 2011.
22. A.Hoog. Chapter 6-android forensic techniques. In: A.Hoog, editor. Android forensics: investigation, analysis and mobile security for Google Android. Boston, MA: Syngress; 2011. p. 195–284.
23. N.Son, Y.Lee, D.Kim, J.I.James, S.Lee, K.Lee. A study of user data integrity during acquisition of Android devices. Digital Invest. 2013;10(Supplement):S3–S11.10.1016/j.diin.2013.06.001
24. T.Vidas, C.Zhang, N.Christin. Toward a general collection methodology for Android devices. Digital Invest. 2011;8(Supplement):S14–S24.10.1016/j.diin.2011.05.003
25. J.Lessard, G.Kessler. Android forensics: simplifying cell phone examinations. Small Scale Digital Device Forensics J. 2009;4(1):1–12.
26. J.Sylve, A.Case, L.Marziale, G.G.Richard. Acquisition and analysis of volatile memory from android devices. Digital Invest. 2012;8(3–4):175–184.10.1016/j.diin.2011.10.003
27. Q.Do, B.Martini, K.-K.R.Choo. Exfiltrating data from Android devices. Comput Secur. 2015;48:74–91.10.1016/j.cose.2014.10.016
28. J.Zdziarski. iPhone forensics: recovering evidence, personal data, and corporate assets. 1 edition ed. Sebastopol, CA: O’Reilly Media; 2008.
29. A.Hoog, K.Gaffaney, iPhone Forensics Whitepaper Introduction. NowSecure Blogs [Internet]. 2009 [cited 2015 July 22]. Available from: https://www.nowsecure.com/blog/2009/07/11/iphone-forensics-whitepaper-introduction/
30. S.Morrissey, T.Campbell. iOS forensic analysis: for iPhone, iPad, and iPod touch. 2010 ed. Berkeley, Calif.: New York: Apress; 2010.10.1007/978-1-4302-3343-5
31. M.Bader, I.Baggili. iPhone 3GS forensics: Logical analysis using apple iTunes backup utility. Small Scale Digital Device Forensics J. 2010;4(1):1–15.
32. T.Proffitt, Forensic Analysis on iOS Devices – Forensic-analysis-ios-devices-34092. 2012 [cited 2015 July 22]. Available from: https://www.sans.org/reading-room/whitepapers/forensics/forensic-analysis-ios-devices-34092
33. N.Al Mutawa I.Baggili, A.Marrington. Forensic analysis of social networking applications on mobile devices. Digital Invest. 2012;9:S24–S33.10.1016/j.diin.2012.05.007
34. M.Engman. Forensic investigations of Apple’s iPhone. HALMSTAD: Sektionen för informationsvetenskap; 2013.
35. A.Ariffin, C.D’Oorazio, K.-K.R.Choo, J.Slay. iOS forensics: how can we recover deleted image files with timestamp in a forensically sound manner? In: 2013 Eighth International Conference on Availability, Reliability and Security (ARES); 2013. p. 375–382.10.1109/ARES.2013.50
36. J.Jung, C.Jeong, K.Byun, S.Lee. Sensitive privacy data acquisition in the iPhone for digital forensic analysis. In: J.J.Park, J.Lopez, S.-S.Yeo, T.Shon, D.Taniar, editors. Secure and Trust Computing, Data Management and Applications. Communications in Computer and Information Science. Berlin Heidelberg: Springer; 2011. p. 172–186.
37. H.Said, A.Yousif, H.Humaid. IPhone forensics techniques and crime investigation. in: Current Trends in Information Technology (CTIT), 2011 International Conference and Workshop on. IEEE; 2011. p. 120–125.
38. Y.-C.Tso, S.-J.Wang, C.-T.Huang, W.-J.Wang. iPhone social networking for evidence investigations using iTunes forensics. In: Proceedings of the 6th International Conference on Ubiquitous Information Management and Communication. ICUIMC '12. New York, NY: ACM; 2012. p. 62:1–62:7.
39. D.Quick, K.-K.R.Choo. Digital droplets: Microsoft SkyDrive forensic data remnants. Future Gener Comput Syst. 2013;29(6):1378–1394.10.1016/j.future.2013.02.001
40. D.Quick, K.-K.R.Choo. Dropbox analysis: data remnants on user machines. Digital Invest. 2013;10(1):3–18.10.1016/j.diin.2013.02.003
41. D.Quick, K.-K.R.Choo. Google drive: forensic analysis of data remnants. J Network Comput App. 2014;40:179–193.10.1016/j.jnca.2013.09.016
42. C.Anglano. Forensic analysis of WhatsApp Messenger on android smartphones. Digital Invest. 2014;11(3):201–213.10.1016/j.diin.2014.04.003
43. R.McKemmish. What is forensic computing? Trends & issues in crime and criminal justice Australian Inst Criminology; 1999;118:1–6.
44. B.Martini, K.-K.R.Choo. An integrated conceptual digital forensic framework for cloud computing. Digital Invest. 2012;9(2):71–80.10.1016/j.diin.2012.07.001
45. B.Martini, K.-K.R.Choo. Distributed filesystem forensics: XtreemFS as a case study. Digital Invest. 2014;11(4):295–313.10.1016/j.diin.2014.08.002
46. B.Martini, R.Choo. Remote programmatic vCloud forensics: a six-step collection process and a proof of concept. In: Proceedings of 13th IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom 2014). IEEE Computer Society Press; 2014. p. 935–942.
47. B.Martini, Q.Do, K.-K.R.Choo. Mobile cloud forensics: an analysis of seven popular Android apps. In: K.-K.R.Choo, editor. The cloud security ecosystem. Boston, MA: Syngress; 2015. p. 309–345.
48. R.Ayers, S.Brothers, W.Jansen. Guidelines on mobile device forensics. National Institute of Standards and Technology; 2014.
49. EDRM LLC, EDRM Enron Email Data Set. EDRM LLC [Internet]. 2013 [cited 2014 November 24]. Available from: http://www.edrm.net/resources/data-sets/edrm-enron-email-data-set